This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json) Hash identifier: zO503rwFokZ2fYaRRgyOKWk/OoGQz02SCnWnQZ9pyCs= Subject key identifier: 63:36:28:A8:0E:96:19:04:AB:B6:8B:85:FB:34:88:C5:3A:9C:0B:52 Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568 Certificate serial: 019B31561757896DEA4680181133C3B11E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft Manifest number: 100B Signing time: Thu 18 Dec 2025 12:01:24 +0000 Manifest this update: Thu 18 Dec 2025 12:01:24 +0000 Manifest next update: Fri 19 Dec 2025 12:01:24 +0000 Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=) 2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: z/9j3l69bw/bgU8PtM26Z5hWdDfg3W2g0vNVEcfv/jU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:17:57:89:6d:ea:46:80:18:11:33:c3:b1:1e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568 Validity Not Before: Dec 18 12:01:24 2025 GMT Not After : Dec 19 12:01:24 2025 GMT Subject: CN=633628a80e961904abb68b85fb3488c53a9c0b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f4:89:6b:f7:0f:d4:c1:bb:87:a9:5e:0c:2b: 63:94:17:2e:42:f6:31:f1:d8:13:7a:9b:b5:17:6d: 03:35:a9:d8:bd:21:35:4d:5f:88:7f:0f:77:42:de: ff:e1:6c:1d:74:43:19:b8:ae:7a:62:5e:fe:24:6d: ff:e9:e1:3a:ed:00:c5:95:77:7b:47:aa:42:bf:67: fc:22:36:19:af:6d:23:b5:2f:de:6a:cb:88:79:c4: 7d:38:ec:54:8a:06:2e:ad:a0:f2:14:cc:0f:60:5c: 43:66:2b:94:43:57:52:2e:0a:f0:df:ed:b3:9d:28: 4b:3d:21:34:f7:52:8a:77:7d:a3:18:6c:6b:11:1b: 0e:58:99:93:1d:d4:0a:42:65:91:bf:65:d2:e3:4c: 3b:71:5f:9e:bf:48:a2:66:4d:80:6c:47:ae:61:dc: 8b:ca:3c:77:47:bd:87:86:6e:e5:30:32:21:91:54: 7e:89:80:a9:cf:37:92:f8:a8:88:6d:31:0c:31:da: fb:e6:eb:52:e6:6f:95:d8:8f:d3:d9:50:e7:3d:a8: a3:f2:b8:6a:f5:62:f2:4c:03:b1:13:b3:ff:03:89: 1d:79:44:fe:47:50:58:62:26:77:fe:91:54:42:d4: 24:b5:3d:93:33:44:73:71:c3:55:16:8b:d6:6d:02: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:36:28:A8:0E:96:19:04:AB:B6:8B:85:FB:34:88:C5:3A:9C:0B:52 X509v3 Authority Key Identifier: keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:fa:04:70:49:b2:f9:a7:77:95:92:50:98:9f:16:1f:b9:95: 29:26:00:d0:2d:c3:71:6a:7f:c8:ca:63:cf:21:c2:02:69:49: 7d:ee:99:f3:ba:5f:c6:36:f8:7d:2d:97:41:40:12:ca:cc:81: ef:48:57:dd:72:7c:72:09:a1:23:65:8d:7e:d4:6f:57:53:4e: 16:ab:6f:67:98:d2:ae:81:68:d9:32:7f:03:14:8d:bc:49:b9: 81:84:d5:84:2c:3f:a0:92:1b:d3:8b:84:dd:c7:ec:a5:26:9f: 22:3a:29:5c:4c:72:b3:76:ae:92:86:59:4d:58:70:da:b6:c5: 9d:fa:54:8f:a2:54:ab:77:fc:9f:78:34:57:04:35:07:96:a2: c3:4b:b5:f9:d6:f4:72:a6:3f:2e:9a:03:98:fd:bf:dd:1d:ff: b1:6e:c3:9e:1e:3a:76:28:8d:1e:2d:82:b7:de:db:f8:58:1b: e9:e1:df:63:74:2f:3c:a3:b5:d2:e5:3f:f2:0d:07:9b:8d:31: ea:dd:cf:be:23:61:ea:46:1a:e3:b4:51:cb:ca:b3:d8:25:e5: 3a:dd:9c:03:f6:54:7e:7b:b7:75:ce:1c:35:02:36:88:1c:6f: 88:57:d3:de:2c:2c:23:1e:99:3c:4e:1f:45:30:42:51:c2:3b: 9c:0c:74:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhdXiW3qRoAYETPDsR5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGFjNTJlMmI1NzJjYzJhOTlhNzQxMjU3ZTU2OWFhMzcx ZTM1NjgwHhcNMjUxMjE4MTIwMTI0WhcNMjUxMjE5MTIwMTI0WjAzMTEwLwYDVQQD Eyg2MzM2MjhhODBlOTYxOTA0YWJiNjhiODVmYjM0ODhjNTNhOWMwYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vSJa/cP1MG7h6leDCtjlBcuQvYx 8dgTepu1F20DNanYvSE1TV+Ifw93Qt7/4WwddEMZuK56Yl7+JG3/6eE67QDFlXd7 R6pCv2f8IjYZr20jtS/easuIecR9OOxUigYuraDyFMwPYFxDZiuUQ1dSLgrw3+2z nShLPSE091KKd32jGGxrERsOWJmTHdQKQmWRv2XS40w7cV+ev0iiZk2AbEeuYdyL yjx3R72Hhm7lMDIhkVR+iYCpzzeS+KiIbTEMMdr75utS5m+V2I/T2VDnPaij8rhq 9WLyTAOxE7P/A4kdeUT+R1BYYiZ3/pFUQtQktT2TM0RzccNVFovWbQL/CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM2KKgOlhkEq7aLhfs0iMU6nAtSMB8GA1UdIwQY MBaAFMhKxS4rVyzCqZp0Elflaao3HjVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQt MmNjMzQyYjAwNTE5LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQtMmNjMzQyYjAwNTE5 LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvoEcEmy +ad3lZJQmJ8WH7mVKSYA0C3DcWp/yMpjzyHCAmlJfe6Z87pfxjb4fS2XQUASysyB 70hX3XJ8cgmhI2WNftRvV1NOFqtvZ5jSroFo2TJ/AxSNvEm5gYTVhCw/oJIb04uE 3cfspSafIjopXExys3aukoZZTVhw2rbFnfpUj6JUq3f8n3g0VwQ1B5aiw0u1+db0 cqY/LpoDmP2/3R3/sW7Dnh46diiNHi2Ct97b+Fgb6eHfY3QvPKO10uU/8g0Hm40x 6t3PviNh6kYa47RRy8qz2CXlOt2cA/ZUfnu3dc4cNQI2iBxviFfT3iwsIx6ZPE4f RTBCUcI7nAx08A== -----END CERTIFICATE-----Generated at Thu Dec 18 20:31:15 2025 by rpki-client